Snort mailing list archives

Re: Enabling Flex-resp


From: "Guillaume Arcas" <guillaume.arcas () free fr>
Date: Wed, 2 Jun 2004 15:14:01 +0200 (CEST)

simonkc () netsol co in a dit :
Hi,,

How do I enable flex-response in Snort??

Hello.

At compile time by passing --enable-flexresp to the configure script.

You can activate this by adding some keywords in your rules.
See this for how it works :
http://www.snort.org/docs/snort_manual/node16.html#SECTION00373000000000000000

Seems it works well, so I advice to use it with bullet-proof rules that do
not generate false-positive events.


Regards,

Guillaume Arcas

------------------------------------------------------------------------
Là-bas, vers le sud, la plaine s'ouvre, infinie, attirante...
Puis le désert, sa vie libre et errante et son bienfaisant silence.
Isabelle Eberhardt - Au pays des sables.


-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: